diff --git a/.github/workflows/pr_info_intro.yml b/.github/workflows/pr_info_intro.yml
index a38f673bb..96068b29e 100644
--- a/.github/workflows/pr_info_intro.yml
+++ b/.github/workflows/pr_info_intro.yml
@@ -14,12 +14,10 @@ permissions:
 jobs:
   intro_comment:
     name: Make intro comment
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
     - name: 'Prepare sticky comment'
-      # commit of v2.5.0
-      # same one used again at the bottom of the file to update the comment.
-      uses: marocchino/sticky-pull-request-comment@3d60a5b2dae89d44e0c6ddc69dd7536aec2071cd
+      uses: marocchino/sticky-pull-request-comment@2.9.0
       with:
         message: |
           Thanks for your Pull Request and making D better!
diff --git a/.github/workflows/pr_info_post.yml b/.github/workflows/pr_info_post.yml
index 6774e4f76..136fcd320 100644
--- a/.github/workflows/pr_info_post.yml
+++ b/.github/workflows/pr_info_post.yml
@@ -12,14 +12,14 @@ permissions:
 jobs:
   comment:
     name: PR Info
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     if: >
       github.event.workflow_run.event == 'pull_request' &&
       github.event.workflow_run.conclusion == 'success'
     steps:
     # from https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
     - name: 'Download artifact'
-      uses: actions/github-script@v3.1.0
+      uses: actions/github-script@v7
       with:
         script: |
           var artifacts = await github.actions.listWorkflowRunArtifacts({
@@ -46,7 +46,7 @@ jobs:
         echo "PR_ID=$PR_ID" >> $GITHUB_ENV
 
     - name: Update GitHub comment
-      uses: marocchino/sticky-pull-request-comment@3d60a5b2dae89d44e0c6ddc69dd7536aec2071cd
+      uses: marocchino/sticky-pull-request-comment@2.9.0
       with:
         path: ./comment.txt
         number: ${{ env.PR_ID }}
diff --git a/.github/workflows/pr_info_untrusted.yml b/.github/workflows/pr_info_untrusted.yml
index 56b82147f..338511a75 100644
--- a/.github/workflows/pr_info_untrusted.yml
+++ b/.github/workflows/pr_info_untrusted.yml
@@ -12,7 +12,7 @@ on:
 jobs:
   pr_info:
     name: PR Info
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
     # we first create a comment thanking the user in pr_info_intro.yml
     # (separate step due to needing GITHUB_TOKEN access)